CPSec manager: Secure content protection management technology with time and space constraint for E-document

In this paper, a secure Content Protection Secure Management Scheme about electronic documents (named CPSec EDMS) will be proposed, in which the architecture, key technology and authorization protocol, security analysis of CPSec EDMS will be discussed. To prevent document leakage, the client of CPSec EDMS adopts transparent encryption technology based on filter driver, in which the client encrypts files automatically. Considering the off-line mode exiting in the application, the client of the CPSec EDMS will call function of offline decryption interface, which is running in application layer. In view of different receiver, the CPSec EDMS will adopt different strategy, in which the client will encapsulate the permission and the ciphertext for the receiver internal while the receiver will apply for decryption from the server. In contrast, the client will encapsulate the permission and the plaintext for the receiver external.